Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d0f79c2-6f98-32b4-b6e7-f5e3031eb0bb.roa
File: 1d0f79c2-6f98-32b4-b6e7-f5e3031eb0bb.roa (raw, json)
Hash identifier: j8kNkeUn7X7tBTnhq/kHd+iarPGOELoP2WF5HiFdACg=
Subject key identifier: 19:8E:48:39:4F:A0:87:40:CD:65:AD:D8:FB:81:88:EE:99:31:B2:92
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0B44B822D944D4BB8B7000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d0f79c2-6f98-32b4-b6e7-f5e3031eb0bb.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.145.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0b:44:b8:22:d9:44:d4:bb:8b:70:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=f281f93b-1aac-4001-a0ed-15c9ea7d0390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:84:6e:13:16:75:43:70:ad:e4:72:a6:13:a8:
36:72:67:cd:b5:cc:49:30:5f:16:59:20:bb:4e:f3:
1d:7a:58:16:88:4a:5a:ec:a6:51:ef:41:5d:2d:47:
6b:0e:48:00:c1:81:69:22:eb:ce:85:59:f8:f6:b4:
ee:89:6d:64:0e:38:ab:a2:c4:2b:19:73:f2:0b:26:
86:51:ed:e5:39:bd:2d:c9:3e:e5:36:be:be:c8:61:
da:d5:03:76:0f:b8:a9:2d:2f:ba:69:cc:24:2a:e4:
e9:38:41:5f:58:08:37:e3:de:f1:f7:11:64:2f:77:
48:c9:41:f2:f5:3a:dd:8d:1d:0f:59:ec:e3:92:af:
a6:62:26:92:f3:cb:10:97:e4:88:f3:14:30:a1:8a:
84:1c:25:ea:c4:f3:4d:0a:06:52:cc:09:07:d1:df:
df:64:ca:b9:64:91:49:6b:c2:77:06:c8:65:19:74:
1e:b3:1e:52:8e:1f:b0:86:04:ab:87:34:e5:8c:29:
bf:7f:0a:c8:d7:46:e6:51:c5:2e:ef:56:93:f9:4c:
76:18:f3:34:fa:e2:b7:69:fa:b9:f2:43:ae:24:f1:
91:3d:a4:cb:71:49:61:07:eb:ea:89:aa:4e:c8:d4:
68:c7:d8:73:13:f5:80:26:4a:51:30:8b:45:78:eb:
7f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:8E:48:39:4F:A0:87:40:CD:65:AD:D8:FB:81:88:EE:99:31:B2:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d0f79c2-6f98-32b4-b6e7-f5e3031eb0bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.145.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:47:32:60:ce:97:d6:35:4b:29:4d:bd:72:c8:a3:8f:fd:b4:
ba:06:74:d3:d0:7c:d3:f4:ca:26:db:0d:4b:54:ab:8b:fd:8e:
ef:15:dd:46:e4:da:54:dd:6c:73:65:76:9a:04:87:a3:03:a6:
dc:19:51:06:b8:94:a9:b7:d7:59:1f:f5:3a:4e:bb:fc:21:4e:
59:15:a6:8d:3d:75:e2:5e:eb:ad:0b:4e:95:fe:fd:1c:c9:43:
02:a2:e2:a5:79:f9:50:22:75:68:54:97:3d:16:e9:c6:fa:66:
8d:7a:cb:88:a4:43:e6:f9:79:b3:58:ce:b1:59:36:09:47:08:
dd:de:a0:d2:e2:1d:51:a5:f8:21:a3:bb:c1:bc:ae:b1:2a:9b:
65:59:30:2d:f8:37:ac:f6:8f:2f:97:48:4d:7e:45:1f:b4:c6:
65:b9:57:1e:2b:a4:da:35:d0:4f:cf:4d:9a:41:a6:6c:e6:df:
19:da:7b:99:96:6d:60:2b:9e:75:c6:bf:1e:cd:aa:b5:a0:65:
a1:14:83:c3:b8:ee:bc:64:1f:13:20:ec:04:5c:89:9e:0f:61:
24:87:13:7e:47:9b:64:7d:49:c2:01:eb:fc:eb:00:56:3b:7b:
be:f5:43:2e:27:69:4f:8f:ad:61:da:de:66:e7:0f:23:c8:7b:
a8:28:ab:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:17:50 2025 by rpki-client